CVE-2026-97451

ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)

State: Published
Severity: 8.4 High
Published: Sep 24, 2026
Updated: Oct 3, 2026
Reserved: Sep 24, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)

Add overflow check for Index + Length to prevent integer overflow when calculating the truncation length. This prevents negative size parameter being passed to memcpy().

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6da963ed4c3de0963c23809af3194323328080d2Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e539003886b34c8109574820b9ba67f0dbe62a12Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9010ad440f970e684324d507510415a67bc125e4Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4532c9cf006bb6323957897455b6a5ab45957a19Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d0d89f2e16a874e0f8fb17045da293e8bedf8b21Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b96401812cbfbb4803faabeefa1f20b8562268b3Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0e2021f49e64b3c8a9aa880d0c62a218bfe147ceAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6da963ed4c3de0963c23809af3194323328080d2Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e539003886b34c8109574820b9ba67f0dbe62a12Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9010ad440f970e684324d507510415a67bc125e4Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4532c9cf006bb6323957897455b6a5ab45957a19Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d0d89f2e16a874e0f8fb17045da293e8bedf8b21Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b96401812cbfbb4803faabeefa1f20b8562268b3Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0e2021f49e64b3c8a9aa880d0c62a218bfe147ceAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.